[JBoss JIRA] Created: (JBMESSAGING-807) security context switch after sending a message
by Andrea Di Cesare (JIRA)
security context switch after sending a message
-----------------------------------------------
Key: JBMESSAGING-807
URL: http://jira.jboss.com/jira/browse/JBMESSAGING-807
Project: JBoss Messaging
Issue Type: Bug
Affects Versions: 1.0.1.SP2
Environment: linux (Centos 4.4), jboss 4.0.3SP1, JbossMessaging 1.0.1SP2
Reporter: Andrea Di Cesare
Assigned To: Ovidiu Feodorov
scenario:
a SLSB uses a SFSB and sends a message to a MDB's queue. after having sent the message, the security context seems to switch to JBM's. after that, a call to the SFSB remove method throws security exception.
the EJBs run under a security domain while the JBM has its own
The connection to send the messages is obtained with connection.getConnection(), therefore the unauthenticated principal (set in login-conf.xml) is used to access the queues.
this is the pseudo code of the SLSB:
1. SFSB sfsb = SFSBHome.create();
....
2. send message to the MDB queue;
....
3. sfsb.remove(); <--- here SecurityException - principal = null
if I remove the call 2, everything goes fine and the SFSB is correctly removed.
note the the message is correctly sent.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
19 years, 2 months
[JBoss JIRA] Resolved: (JBPORTAL-1246) Error while creating javascript includes using jboss-portlet.xml
by Julien Viet (JIRA)
[ http://jira.jboss.com/jira/browse/JBPORTAL-1246?page=all ]
Julien Viet resolved JBPORTAL-1246.
-----------------------------------
Fix Version/s: 2.6.Beta1
Resolution: Done
> Error while creating javascript includes using jboss-portlet.xml
> ----------------------------------------------------------------
>
> Key: JBPORTAL-1246
> URL: http://jira.jboss.com/jira/browse/JBPORTAL-1246
> Project: JBoss Portal
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Components: Portal Core
> Affects Versions: 2.6.Alpha2
> Environment: Windows XP
> Reporter: Stephen Westbom
> Assigned To: Julien Viet
> Priority: Blocker
> Fix For: 2.6.Beta1
>
>
> If you include a js file using the jboss-portlet.xml css includes and js includes will get no closing elements or a close in the include element:
> The only change between the two entries is this:
> Entry with js includes
> <portlet>
> <portlet-name>ipotrak_1</portlet-name>
> <header-content>
> <link rel="stylesheet" type="text/css"
> href="/styles/research.css" media="screen" title="" />
> <link rel="stylesheet" type="text/css"
> href="/styles/ajax.css" media="screen" title="" />
> <script type="text/javascript" language="JavaScript"
> src="/javascript/validation.js" />
> <script type="text/javascript" language="javascript"
> src="/javascript/Selectbox/selectbox.js" />
> </header-content>
> </portlet>
> Entry without js includes:
> <portlet>
> <portlet-name>ipotrak_1</portlet-name>
> <header-content>
> <link rel="stylesheet" type="text/css"
> href="/styles/research.css" media="screen" title="" />
> <link rel="stylesheet" type="text/css"
> href="/styles/ajax.css" media="screen" title="" />
> </header-content>
> </portlet>
> With JS reference in jboss-portlet.xml this is the top of the generated page:
> <html xmlns="http://www.w3.org/1999/xhtml">
> â??â??â??â??â??
> <head>
> <title>JBoss Portal 2.6.0-ALPHA2</title>
> <meta http-equiv="Content-Type" content="text/html;">
> <!-- to correct the unsightly Flash of Unstyled Content. -->
> <script type="text/javascript"></script>
> <!-- inject the theme; default to the renaissance theme if nothing is selected for the portal or the page -->
> <link rel="stylesheet" type="text/css" id="main_css"
> href="/portal-core/themes/renaissance/portal_style.css">
> <link rel="shortcut icon"
> href="/portal-core/themes/renaissance/images/favicon.ico">
> <link rel="icon" type="image/gif"
> href="/portal-core/themes/renaissance/images/animated_favicon1.gif">
> <!-- insert header content that was possibly set by portlets on the page -->
> <link type="text/css" rel="stylesheet"
> href="/investmentportal/styles/research.css" media="screen">
> <link type="text/css" rel="stylesheet"
> href="/investmentportal/styles/ajax.css" media="screen">
> <script type="text/javascript"
> src="/investmentportal/javascript/validation.js">
> <script type='text/javascript' src='/investmentportal/javascript/Selectbox/selectbox.js' />
> </head>
> Without js reference in jboss-portal.xml:
> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
> <html xmlns="http://www.w3.org/1999/xhtml">
> <head>
> <title>JBoss Portal 2.6.0-ALPHA2</title>
> <meta http-equiv="Content-Type" content="text/html;" />
> <!-- to correct the unsightly Flash of Unstyled Content. -->
> <script type="text/javascript"></script>
> <!-- inject the theme; default to the renaissance theme if nothing is selected for the portal or the page -->
> <link rel="stylesheet" type="text/css" id="main_css"
> href="/portal-core/themes/renaissance/portal_style.css" />
> <link rel="shortcut icon"
> href="/portal-core/themes/renaissance/images/favicon.ico" />
> <link rel="icon" type="image/gif"
> href="/portal-core/themes/renaissance/images/animated_favicon1.gif" />
> <!-- insert header content that was possibly set by portlets on the page -->
> <link type='text/css' rel='stylesheet'
> href='/investmentportal/styles/research.css' media='screen' />
> <link type='text/css' rel='stylesheet'
> href='/investmentportal/styles/ajax.css' media='screen' />
> </head>
> Notice all the elements are closed when no js is referenced in jboss-portlet.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
19 years, 2 months
[JBoss JIRA] Updated: (JBPORTAL-1246) Error while creating javascript includes using jboss-portlet.xml
by Stephen Westbom (JIRA)
[ http://jira.jboss.com/jira/browse/JBPORTAL-1246?page=all ]
Stephen Westbom updated JBPORTAL-1246:
--------------------------------------
We have stopped development within your portal until this one is fixed.
> Error while creating javascript includes using jboss-portlet.xml
> ----------------------------------------------------------------
>
> Key: JBPORTAL-1246
> URL: http://jira.jboss.com/jira/browse/JBPORTAL-1246
> Project: JBoss Portal
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Components: Portal Core
> Affects Versions: 2.6.Alpha2
> Environment: Windows XP
> Reporter: Stephen Westbom
> Assigned To: Julien Viet
> Priority: Blocker
>
> If you include a js file using the jboss-portlet.xml css includes and js includes will get no closing elements or a close in the include element:
> The only change between the two entries is this:
> Entry with js includes
> <portlet>
> <portlet-name>ipotrak_1</portlet-name>
> <header-content>
> <link rel="stylesheet" type="text/css"
> href="/styles/research.css" media="screen" title="" />
> <link rel="stylesheet" type="text/css"
> href="/styles/ajax.css" media="screen" title="" />
> <script type="text/javascript" language="JavaScript"
> src="/javascript/validation.js" />
> <script type="text/javascript" language="javascript"
> src="/javascript/Selectbox/selectbox.js" />
> </header-content>
> </portlet>
> Entry without js includes:
> <portlet>
> <portlet-name>ipotrak_1</portlet-name>
> <header-content>
> <link rel="stylesheet" type="text/css"
> href="/styles/research.css" media="screen" title="" />
> <link rel="stylesheet" type="text/css"
> href="/styles/ajax.css" media="screen" title="" />
> </header-content>
> </portlet>
> With JS reference in jboss-portlet.xml this is the top of the generated page:
> <html xmlns="http://www.w3.org/1999/xhtml">
> â??â??â??â??â??
> <head>
> <title>JBoss Portal 2.6.0-ALPHA2</title>
> <meta http-equiv="Content-Type" content="text/html;">
> <!-- to correct the unsightly Flash of Unstyled Content. -->
> <script type="text/javascript"></script>
> <!-- inject the theme; default to the renaissance theme if nothing is selected for the portal or the page -->
> <link rel="stylesheet" type="text/css" id="main_css"
> href="/portal-core/themes/renaissance/portal_style.css">
> <link rel="shortcut icon"
> href="/portal-core/themes/renaissance/images/favicon.ico">
> <link rel="icon" type="image/gif"
> href="/portal-core/themes/renaissance/images/animated_favicon1.gif">
> <!-- insert header content that was possibly set by portlets on the page -->
> <link type="text/css" rel="stylesheet"
> href="/investmentportal/styles/research.css" media="screen">
> <link type="text/css" rel="stylesheet"
> href="/investmentportal/styles/ajax.css" media="screen">
> <script type="text/javascript"
> src="/investmentportal/javascript/validation.js">
> <script type='text/javascript' src='/investmentportal/javascript/Selectbox/selectbox.js' />
> </head>
> Without js reference in jboss-portal.xml:
> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
> <html xmlns="http://www.w3.org/1999/xhtml">
> <head>
> <title>JBoss Portal 2.6.0-ALPHA2</title>
> <meta http-equiv="Content-Type" content="text/html;" />
> <!-- to correct the unsightly Flash of Unstyled Content. -->
> <script type="text/javascript"></script>
> <!-- inject the theme; default to the renaissance theme if nothing is selected for the portal or the page -->
> <link rel="stylesheet" type="text/css" id="main_css"
> href="/portal-core/themes/renaissance/portal_style.css" />
> <link rel="shortcut icon"
> href="/portal-core/themes/renaissance/images/favicon.ico" />
> <link rel="icon" type="image/gif"
> href="/portal-core/themes/renaissance/images/animated_favicon1.gif" />
> <!-- insert header content that was possibly set by portlets on the page -->
> <link type='text/css' rel='stylesheet'
> href='/investmentportal/styles/research.css' media='screen' />
> <link type='text/css' rel='stylesheet'
> href='/investmentportal/styles/ajax.css' media='screen' />
> </head>
> Notice all the elements are closed when no js is referenced in jboss-portlet.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
19 years, 2 months
[JBoss JIRA] Updated: (JBPORTAL-1246) Error while creating javascript includes using jboss-portlet.xml
by Stephen Westbom (JIRA)
[ http://jira.jboss.com/jira/browse/JBPORTAL-1246?page=all ]
Stephen Westbom updated JBPORTAL-1246:
--------------------------------------
Complexity: Low
Priority: Blocker (was: Major)
Looks like this bug was reported previously, What gives here?
JBPORTAL-1173
> Error while creating javascript includes using jboss-portlet.xml
> ----------------------------------------------------------------
>
> Key: JBPORTAL-1246
> URL: http://jira.jboss.com/jira/browse/JBPORTAL-1246
> Project: JBoss Portal
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Components: Portal Core
> Affects Versions: 2.6.Alpha2
> Environment: Windows XP
> Reporter: Stephen Westbom
> Assigned To: Julien Viet
> Priority: Blocker
>
> If you include a js file using the jboss-portlet.xml css includes and js includes will get no closing elements or a close in the include element:
> The only change between the two entries is this:
> Entry with js includes
> <portlet>
> <portlet-name>ipotrak_1</portlet-name>
> <header-content>
> <link rel="stylesheet" type="text/css"
> href="/styles/research.css" media="screen" title="" />
> <link rel="stylesheet" type="text/css"
> href="/styles/ajax.css" media="screen" title="" />
> <script type="text/javascript" language="JavaScript"
> src="/javascript/validation.js" />
> <script type="text/javascript" language="javascript"
> src="/javascript/Selectbox/selectbox.js" />
> </header-content>
> </portlet>
> Entry without js includes:
> <portlet>
> <portlet-name>ipotrak_1</portlet-name>
> <header-content>
> <link rel="stylesheet" type="text/css"
> href="/styles/research.css" media="screen" title="" />
> <link rel="stylesheet" type="text/css"
> href="/styles/ajax.css" media="screen" title="" />
> </header-content>
> </portlet>
> With JS reference in jboss-portlet.xml this is the top of the generated page:
> <html xmlns="http://www.w3.org/1999/xhtml">
> â??â??â??â??â??
> <head>
> <title>JBoss Portal 2.6.0-ALPHA2</title>
> <meta http-equiv="Content-Type" content="text/html;">
> <!-- to correct the unsightly Flash of Unstyled Content. -->
> <script type="text/javascript"></script>
> <!-- inject the theme; default to the renaissance theme if nothing is selected for the portal or the page -->
> <link rel="stylesheet" type="text/css" id="main_css"
> href="/portal-core/themes/renaissance/portal_style.css">
> <link rel="shortcut icon"
> href="/portal-core/themes/renaissance/images/favicon.ico">
> <link rel="icon" type="image/gif"
> href="/portal-core/themes/renaissance/images/animated_favicon1.gif">
> <!-- insert header content that was possibly set by portlets on the page -->
> <link type="text/css" rel="stylesheet"
> href="/investmentportal/styles/research.css" media="screen">
> <link type="text/css" rel="stylesheet"
> href="/investmentportal/styles/ajax.css" media="screen">
> <script type="text/javascript"
> src="/investmentportal/javascript/validation.js">
> <script type='text/javascript' src='/investmentportal/javascript/Selectbox/selectbox.js' />
> </head>
> Without js reference in jboss-portal.xml:
> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
> <html xmlns="http://www.w3.org/1999/xhtml">
> <head>
> <title>JBoss Portal 2.6.0-ALPHA2</title>
> <meta http-equiv="Content-Type" content="text/html;" />
> <!-- to correct the unsightly Flash of Unstyled Content. -->
> <script type="text/javascript"></script>
> <!-- inject the theme; default to the renaissance theme if nothing is selected for the portal or the page -->
> <link rel="stylesheet" type="text/css" id="main_css"
> href="/portal-core/themes/renaissance/portal_style.css" />
> <link rel="shortcut icon"
> href="/portal-core/themes/renaissance/images/favicon.ico" />
> <link rel="icon" type="image/gif"
> href="/portal-core/themes/renaissance/images/animated_favicon1.gif" />
> <!-- insert header content that was possibly set by portlets on the page -->
> <link type='text/css' rel='stylesheet'
> href='/investmentportal/styles/research.css' media='screen' />
> <link type='text/css' rel='stylesheet'
> href='/investmentportal/styles/ajax.css' media='screen' />
> </head>
> Notice all the elements are closed when no js is referenced in jboss-portlet.xml
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
19 years, 2 months
